R0106-HP MSR Router Series Security Configuration Guide(V7)

433
# Define IPv6 ACL 2010 to permit traffic from network 1010::/64.
<RouterB> system-view
[RouterB] acl ipv6 number 2010
[RouterB-acl-basic-2010] rule permit source 1010:: 64
[RouterB-acl-basic-2010] quit
# Specify the IPv6 address of GigabitEthernet 2/1/1.
[RouterB] interface gigabitethernet 2/1/1
[RouterB-GigabitEthernet2/1/1] ipv6 address 1000::2/64
# Configure strict uRPF check on GigabitEthernet 2/1/1.
[RouterB-GigabitEthernet2/1/1] ipv6 urpf strict acl 2010
2. Configure Router A:
# Specify the IPv6 address of GigabitEthernet 2/1/1.
<RouterA> system-view
[RouterA] interface gigabitethernet 2/1/1
[RouterA-GigabitEthernet2/1/1] ipv6 address 1000::1/64
# Configure strict uRPF check on GigabitEthernet 2/1/1 and allow using the default route for IPv6
uRPF check.
[RouterA-GigabitEthernet2/1/1] ipv6 urpf strict allow-default-route